This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft File: 2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json) Hash identifier: 63+R1lXpKUdezjqLPglCiZojajZU5mb4za3NXVXqV5M= Subject key identifier: 20:D4:F9:AE:90:D8:5A:2E:CC:F9:B6:60:DD:EE:DE:39:36:92:28:0E Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 Certificate issuer: /CN=da6e6f392271951b35347facd513f932fe67a0c1 Certificate serial: 019B2C6688F8FADFDC90680982340AF56CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 13:01:15 +0000 Manifest this update: Wed 17 Dec 2025 13:01:15 +0000 Manifest next update: Thu 18 Dec 2025 13:01:15 +0000 Files and hashes: 1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: Nh6/MavF4l7vNLccM9vdFm6B8iuKBAoUI+QvCtOh+TQ=) 2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:88:f8:fa:df:dc:90:68:09:82:34:0a:f5:6c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1 Validity Not Before: Dec 17 13:01:15 2025 GMT Not After : Dec 18 13:01:15 2025 GMT Subject: CN=20d4f9ae90d85a2eccf9b660ddeede393692280e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:27:de:8d:f4:1a:b0:dd:b6:01:97:60:93: f3:49:cd:26:78:f8:7b:ad:68:d4:32:c8:b0:72:73: 7b:f4:22:3a:80:7b:c9:e3:aa:80:06:16:91:fb:80: 0e:10:ce:65:ae:13:05:16:a2:8d:73:db:f9:8a:19: 04:6f:c0:9d:70:90:c7:a1:a7:ef:d0:d8:af:2e:4d: 0f:bd:98:69:62:4b:85:c6:53:20:91:1a:a2:62:30: 20:bb:89:f3:44:74:c8:7d:26:ac:f7:29:17:fe:60: e6:60:44:5d:0a:62:00:50:7d:e4:b7:30:08:37:ab: f6:c1:43:fd:38:7e:a3:85:53:f4:fa:28:15:6f:ea: 84:34:fe:5c:c6:99:28:5e:aa:0f:40:f2:33:3c:92: eb:a1:8e:ca:ce:73:be:bc:f4:28:60:56:c4:99:0b: 6e:0e:6c:ba:c7:7b:b5:a0:d0:a3:be:10:2c:e3:5b: b7:07:71:2a:1f:0a:9c:96:99:76:6d:25:1c:c9:82: 1e:6a:c1:1b:93:fc:d5:36:8b:73:93:04:cb:f3:bf: 03:5c:86:c8:b2:b7:3b:80:76:20:a5:8c:f8:54:a0: 5d:89:96:60:7c:64:43:df:02:45:54:3d:d4:13:5e: e3:87:9c:6e:07:a2:e8:84:82:41:a5:b4:09:38:45: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D4:F9:AE:90:D8:5A:2E:CC:F9:B6:60:DD:EE:DE:39:36:92:28:0E X509v3 Authority Key Identifier: keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e0:a8:66:4f:07:77:67:cb:a1:de:60:fe:48:21:9f:4a:9d: 50:db:19:e0:5d:44:b4:7c:15:cd:79:d1:11:87:c5:7a:e5:e8: e9:b1:ea:18:07:06:0e:bd:f3:21:3e:d3:ab:20:84:11:60:63: 6f:75:bb:5b:a7:2b:47:ec:75:8c:02:93:ec:b3:c9:b2:35:c5: 40:d7:c5:b9:4c:01:85:b8:98:04:16:b7:50:db:75:81:7c:dd: 82:62:64:04:4d:ca:85:77:c0:59:08:e4:1c:cf:92:88:83:c9: d9:35:64:91:79:5d:05:7b:c3:be:55:62:66:b2:2c:cc:41:61: b5:38:08:2a:e3:7c:a5:c4:99:dd:f0:72:6c:67:82:8b:7f:c9: 22:f5:cc:b2:8e:4f:74:46:f6:c0:8f:26:b8:94:a7:05:b8:a2: 81:d1:e0:47:d1:f4:48:60:da:eb:7b:37:b4:83:75:52:a9:fb: 03:d5:6b:4f:3e:f6:a2:0c:89:08:16:28:5e:c1:cc:56:4c:4e: 86:83:22:27:5c:53:bc:05:0b:16:34:72:8b:10:84:71:65:6a: e2:1d:ef:f3:05:86:cf:d8:18:c7:17:4d:bc:d9:d7:d7:7d:20: c2:2b:83:66:34:d8:01:de:96:27:47:94:ac:8a:bd:0e:34:59: b9:44:0c:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZoj4+t/ckGgJgjQK9WzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhNmU2ZjM5MjI3MTk1MWIzNTM0N2ZhY2Q1MTNmOTMyZmU2 N2EwYzEwHhcNMjUxMjE3MTMwMTE1WhcNMjUxMjE4MTMwMTE1WjAzMTEwLwYDVQQD EygyMGQ0ZjlhZTkwZDg1YTJlY2NmOWI2NjBkZGVlZGUzOTM2OTIyODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup8n3o30GrDdtgGXYJPzSc0mePh7 rWjUMsiwcnN79CI6gHvJ46qABhaR+4AOEM5lrhMFFqKNc9v5ihkEb8CdcJDHoafv 0NivLk0PvZhpYkuFxlMgkRqiYjAgu4nzRHTIfSas9ykX/mDmYERdCmIAUH3ktzAI N6v2wUP9OH6jhVP0+igVb+qENP5cxpkoXqoPQPIzPJLroY7KznO+vPQoYFbEmQtu Dmy6x3u1oNCjvhAs41u3B3EqHwqclpl2bSUcyYIeasEbk/zVNotzkwTL878DXIbI src7gHYgpYz4VKBdiZZgfGRD3wJFVD3UE17jh5xuB6LohIJBpbQJOEWS7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDU+a6Q2FouzPm2YN3u3jk2kigOMB8GA1UdIwQY MBaAFNpubzkicZUbNTR/rNUT+TL+Z6DBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAt Mjc2NDdiY2VmNGIwLzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNDFhOWYtMzQ4ZC00YjI0LWJiYTAtMjc2NDdiY2VmNGIw LzEvMm01dk9TSnhsUnMxTkgtczFSUDVNdjVub01FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseCoZk8H d2fLod5g/kghn0qdUNsZ4F1EtHwVzXnREYfFeuXo6bHqGAcGDr3zIT7TqyCEEWBj b3W7W6crR+x1jAKT7LPJsjXFQNfFuUwBhbiYBBa3UNt1gXzdgmJkBE3KhXfAWQjk HM+SiIPJ2TVkkXldBXvDvlViZrIszEFhtTgIKuN8pcSZ3fBybGeCi3/JIvXMso5P dEb2wI8muJSnBbiigdHgR9H0SGDa63s3tIN1Uqn7A9VrTz72ogyJCBYoXsHMVkxO hoMiJ1xTvAULFjRyixCEcWVq4h3v8wWGz9gYxxdNvNnX130gwiuDZjTYAd6WJ0eU rIq9DjRZuUQMvw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:30:20 2025 by rpki-client